China Data Leak Exposes 4 Billion User Records

Cybersecurity researchers have uncovered what may be the largest known leak of Chinese personal data from a single source, exposing more than 4 billion records online. The 631-gigabyte trove was found on an unsecured server and included sensitive details such as WeChat and Alipay activity, residential addresses, financial data, and national identification information.

The leak, discovered by researchers from Cybernews, was organized into 16 databases, including one labeled “wechatid_db” containing over 805 million records. Another, “address_db,” held more than 780 million entries, while a third, “bank,” included over 630 million financial records.

Investigators were unable to determine the source or ownership of the data before the server was taken offline. They warn that the scope and structure of the information suggest it was compiled for surveillance, profiling, or intelligence purposes. The breach poses significant privacy and security risks, with potential for exploitation through fraud, phishing, and blackmail.